<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="46">
<package pkgid="40e573578141089eff65a9343e1262fc9ea665807e0a46acd2dba6f065b6bef8" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="c20d87498570ba204e8e80e590e43fa4d2b40cabfc1556e0c2d12829af476394" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="9afb3cb094e58c2291a163e9f14e4cabacd740bc17065ff826f86d4956608d08" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="60460696c1ab819a45d4d0c91518a9c8beda23cfaea12b3ffa3476f2139ef46d" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="f9ceb458b618359e18359ee04af0d613af12fca50dcccfbbfa5f2451f0ac7fbb" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="7ef1bf8d46889225a63b9bd85afc15a833851ff0a761e961f5c1c0a82d5b2889" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="a88cbc957cee21c0bd621c5f10f17af9556a802d527559543b692e7d41c4530b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.371.g5237e44a" rel="150500.3.12.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.369.gde6c81bf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1695384000">- Update to version 055+suse.371.g5237e44a:
  * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)</changelog>
</package>
<package pkgid="e4fa25e50d308e8ef222a93bb3f9df60b51da10b35bcd4da1ec627528898fed8" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="cb31dd7ef558b46dd53d3fb7dd6466fb21f710c0540213ad7ff3ee89afb282ad" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="63a9366e1c09ded162fbbe58bf18fc777cfa41c5a98435809afe2e02edd95ef1" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="8a954af8f97bcb82a244850356f8990302006240c216f82ca1414edae4f91b3b" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="2a7df55772f4cd629a82e3ad1090fd36c8c3a7e354359ee6af6e2a6a762bebd7" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="30e26fd086cbd42c7c011a8cac04bc044d1e375c06d3e23f08fa7a46ebbab567" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="06c12a745a2ff425e27bc8dbabb28a311535631e3b711c4299a9bc0942f5f6ad" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="bab3e7c02fc1a4cab2318484c7845e69cdb21ab1fa3bacadcd0a0bbc3f0a2e2f" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="b2339af15aaaaf7c8dab29ca25b7072542bf58ea4e5578f046c0b63c521bdc27" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="78ac205ab03cecedfe7e1e3553c801dce1c91037ca403a48f4d7051c56eee00a" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="3f709658cfdb74bc4827353ef975373b7617aed058d0c14f1bc5b8c88994220f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828803">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828804">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828805">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828806">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828807">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828808">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="mfranc@suse.cz" date="1693915201">- s390/ipl: add missing secure/has_secure file to ipl type
  'unknown' (bsc#1214976).
- commit 33974e8</changelog>
  <changelog author="tzimmermann@suse.com" date="1693915202">- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
  This patch also fixes two CVEs. Update the References tag accordingly.
- commit 552e790</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915203">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="mkubecek@suse.cz" date="1693915204">- netfilter: nf_tables: use correct lock to protect gc_list
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with abort path
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: GC transaction race with netns dismantle
  (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix GC transaction races with netns and
  netlink event exit path (CVE-2023-4563 bsc#1214727).
- netfilter: nf_tables: fix kdoc warnings after gc rework
  (CVE-2023-4563 bsc#1214727).
- refresh
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
- kabi: hide changes in struct nft_set (CVE-2023-4563
  bsc#1214727).
- netfilter: nf_tables: GC transaction API to avoid race with
  control plane (CVE-2023-4563 bsc#1214727).
- commit cfed41c</changelog>
  <changelog author="msuchanek@suse.de" date="1693915205">- Refresh sorted section
- commit a6fbcee</changelog>
  <changelog author="msuchanek@suse.de" date="1693915206">- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit ac82be8</changelog>
  <changelog author="jlee@suse.com" date="1694001600">- Update References
  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
  (git-fixes bsc#1214233 CVE-2023-40283).
- commit 63a801c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit be6100d</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2351f50</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit c11336f</changelog>
</package>
<package pkgid="2a952f43e98faaa18b5ebda00b2479d52ba24fd07f7141addb85493b69812a8d" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a05da3a65f0951600b6c1d3afe83127be24ca89b8a241141480e0f34abdc2b4d" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e0bd7f445336cde9e0ee73481c8e46493ff63292cebe60887f84b00657233694" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.28.1.150500.6.11.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="deb1ce50bbeab4e503f9f6b92dcd58b109c980873b3bf3f3b24de24d0cf42d13" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="76a06ecf07a6c53aa61e3ada05b4f9d6941939bae4833997de8ab22660944627" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.18.1"/>
  <changelog author="mfranc@suse.cz" date="1694606400">- s390/ipl: add eckd support (jsc#PED-2023).
- commit 21b5156</changelog>
  <changelog author="tiwai@suse.de" date="1694606401">- platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
  (git-fixes).
- platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
  (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes).
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more
  descriptors (git-fixes).
- kselftest/runner.sh: Propagate SIGTERM to runner child
  (git-fixes).
- commit 495d04f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606402">- s390/ipl: add eckd dump support (jsc#PED-2025).
- commit 0961d1f</changelog>
  <changelog author="mfranc@suse.cz" date="1694606403">- kabi: hide changes in enum ipl_type and struct sclp_info
  (jsc#PED-2023 jsc#PED-2025).
- commit b6fb6b6</changelog>
  <changelog author="mfranc@suse.cz" date="1694606404">- s390/ipl: use octal values instead of S_* macros (jsc#PED-2023).
- commit db2ef83</changelog>
  <changelog author="mfranc@suse.cz" date="1694606405">- s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023).
- commit cd6d27a</changelog>
  <changelog author="mfranc@suse.cz" date="1694606406">- s390/ipl: add loadparm parameter to eckd ipl/reipl data
  (jsc#PED-2023).
- commit 364a30d</changelog>
  <changelog author="mkubecek@suse.cz" date="1694692800">- sctp: leave the err path free in sctp_stream_init to
  sctp_stream_free (CVE-2023-2177 bsc#1210643).
- commit 337b7d8</changelog>
  <changelog author="mkubecek@suse.cz" date="1694779200">- netfilter: nftables: exthdr: fix 4-byte stack OOB write
  (CVE-2023-4881 bsc#1215221).
- commit 0de26c1</changelog>
  <changelog author="jgross@suse.com" date="1694865600">- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due
  to race condition (bsc#1215206, CVE-2023-1859).
- commit f333aa7</changelog>
  <changelog author="wqu@suse.com" date="1695038400">- btrfs: don't hold CPU for too long when defragging a file
  (bsc#1214988).
- commit 9b89645</changelog>
  <changelog author="tiwai@suse.de" date="1695038401">- ata: libata: disallow dev-initiated LPM transitions to
  unsupported states (git-fixes).
- i2c: aspeed: Reset the i2c controller when timeout occurs
  (git-fixes).
- selftests: tracing: Fix to unmount tracefs for recovering
  environment (git-fixes).
- drm/amd/display: fix the white screen issue when &gt;= 64GB DRAM
  (git-fixes).
- drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
  (git-fixes).
- commit 1f4e814</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038402">- blacklist.conf: Append 'parisc/agp: Annotate parisc agp init functions with __init'
- commit 9eb45cc</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038403">- blacklist.conf: Append 'parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()'
- commit 30a9db6</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038404">- blacklist.conf: Append 'video/aperture: Only remove sysfb on the default vga pci device'
- commit bfaaaff</changelog>
  <changelog author="tzimmermann@suse.com" date="1695038405">- blacklist.conf: Append 'Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()"'
- commit 501bd2e</changelog>
  <changelog author="osalvador@suse.de" date="1695038406">- Rename colliding patches before merging SLE15-SP4
- commit 6493f7c</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 988a527</changelog>
  <changelog author="osalvador@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit c753869</changelog>
  <changelog author="osalvador@suse.de" date="1695384000">- x86/sev: Make enc_dec_hypercall() accept a size instead of
  npages (bsc#1214635).
- commit 1e4ccee</changelog>
</package>
<package pkgid="f5f6ce7f85e83103dd76c8b1cfca2799c0ce699ac89da885f70706cac6b52159" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="de9f9fe22fb4268565a310a62316ba8737096c3b5466ba49ae206e402ecfd65b" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9975584c06db530ee59e809c369d62416d273bc36c289b15375184632901e060" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="091b7a4e7b57eaf46901b5fadf94cf159136f38a8a37c358924a01948766614a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="40043ca918cf34ad6a925de041020b875f95b1fb4eba167a73e65652b32a5551" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="79753d4ab87d404262c9ec674289d0912b06e31744a5d63b5899d60e5ac2de42" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="8d1ff75268b669793bc0850b9dbbd6497d64260b8cee1c95e2ecf839ac6c94e5" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9b2034ab43589e1c33401f316c299753c84ee4f07b843e406e5b4eab365b240d" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="b05ed6aeeddea15d818d13f733f8f9b67b2342608460f021cb3eea0d8802e83d" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="412ca9a7dd0421ac72ca85359edc606782c9545efce85a35284f3631d3474f0e" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="f0cc94cda0cf8f7b3964eee020fd9e9afd5e9f8ee00f3e97a240c75b2bf8e572" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="fc44b45cd1919a729d4eb44ecb31d35175e57fdf0525e12669acfe067950da11" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="b99320be850809ac61b5145f758c27b216ba248e03ab6df15945c3cf6b19d8bc" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="093cc4162472563605e40c66a0308608485e4b7293c6fc64e98142110819234f" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="ed73bca7fdbdad353bce73043d156bcc81df05129f0deb67d3998c939c7a24af" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="bbf74264fe14c7f8882a3dd6365d3cd54020ffb42acde5dec5b5ed243b30821f" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="c95a10ef698f439c890095b89c392469d76001b315c4759eace72205b6710e29" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="b25e9b58c7c6adc03087137d1a0c3f0656e095c6a091e25062db0c05a8cfaf66" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="3e5d58db6b48d7153de38bcd25e186fca8c56ca8e18af940779d4d30f2756b78" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.30.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
  <changelog author="danilo.spinella@suse.com" date="1657713600">- Follow up fix for CVE-2022-24765, potential command injection
  via git worktree.
  (CVE-2022-29187, bsc#1201431)
  * fix-CVE-2022-29187.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2022-39260, overflow in `split_cmdline()`, leading to
  arbitrary heap writes and remote code execution
  (CVE-2022-39260, bsc#1204456)
  fix-CVE-2022-39260.patch
- Fix CVE-2022-39253, dereference issue with symbolic links via
  the `--local` clone mechanism
  (CVE-2022-39253, bsc#1204455)
  fix-CVE-2022-39253.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1673524800">- Fix CVE-2022-41903, heap overflow in `git archive` and
  `git log --format`
  (CVE-2022-41903, bsc#1207033)
  * fix-CVE-2022-41903.patch
- Fix CVE-2022-23521, gitattributes parsing integer overflow
  (CVE-2022-23521, bsc#1207032)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1676289600">- Fix CVE-2023-22490, using a specially-crafted repository, Git can be tricked
  into using its local clone optimization even when using a non-local transport
  (CVE-2023-22490, bsc#1208027)
- Fix CVE-2023-23946, a path outside the working tree can be overwritten as the
  user who is running "git apply"
  (CVE-2023-23946, bsc#1208028)
  * fix-CVE-2023-22490-1.patch
  * fix-CVE-2023-22490-2.patch
  * fix-CVE-2023-22490-3.patch
  * fix-CVE-2023-22490-4.patch</changelog>
  <changelog author="psimons@suse.com" date="1682337600">- Apply "CVE-2023-25652.patch" to fix a security vulnerability
  where by feeding a specially crafted input to `git apply
  - -reject`, a path outside the working tree could be overwritten
  with partially controlled contents (corresponding to the rejected
  hunk(s) from the given patch). [CVE-2023-25652, bsc#1210686]
- Apply "CVE-2023-25815.patch" to fix a security vulnerability that
  exists when Git is compiled with runtime prefix support and runs
  without translated messages, then it still used the gettext
  machinery to display messages, which subsequently potentially
  looked for translated messages in unexpected places. This allowed
  for malicious placement of crafted messages. [CVE-2023-25815,
  bsc#1210686]
- Apply "CVE-2023-29007-0.patch", "CVE-2023-29007-1.patch",
  "CVE-2023-29007-2.patch", and "CVE-2023-29007-3.patch" to fix a
  security vulnerability that occurred when renaming or deleting a
  section from a configuration file, then certain malicious
  configuration values might have been misinterpreted as the
  beginning of a new configuration section, leading to arbitrary
  configuration injection. [CVE-2023-29007, bsc#1210686]</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
</package>
<package pkgid="a6bcff0fe835d8dc7db56371c2ce3400ad915c48d725f630068ca3e3f3c49fb7" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="636fa49828f21383bce26be738b1d26168ac35b80cd0fb94dfd89212f8e230d8" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="7fd05de42c8e1af36866bc3c57ef4ed4ff341923cbca8d94d20bc3c3684aee71" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="5bb903a404fadb4739becce664930c214f1e11ac2df67777feec922f213fe929" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
</otherdata>